A county board installs a new badge reader on the data-center door and asks whether that control is technical or physical. How should the security analyst classify the badge reader?
Select an answer to reveal the explanation.
Short Explanation
Think of the badge reader like a locked front door with a fancy latch — the goal is still who walks into the room, not which packets hit a firewall. Electronics inside the reader do not turn it into a technical network control. On the exam, facility access gear sits in the physical category.
Full Explanation
CompTIA Security+ classifies controls along a category axis—technical, managerial, operational, and physical—separate from the type axis of preventive, detective, corrective, deterrent, compensating, and directive. A door badge reader on a county data-center entrance exists primarily to govern bodily access into a facility or room. That purpose places it in the physical category even though the reader contains electronics, firmware, and often a network path to an access-control server. Category follows the security function you are applying, not the presence of chips or cables.
Labeling the reader technical solely because it uses electronics confuses implementation detail with category. Many physical controls—electronic locks, biometric turnstiles, mantraps with sensors—embed technology; they remain physical because they mediate physical space. Calling the reader managerial because the board approved the purchase mistakes procurement governance for the control itself: the policy memo may be managerial, but the installed reader is not. Framing it as operational because guards later review badge logs likewise mixes a people-driven review process with the access device; the nightly log review is operational, while the reader that bars or admits people is physical.
Exam caveat: SY0-701 often pairs a physical device with an electronic feature to tempt candidates toward "technical." Ask what the control mainly restricts—packets and software state, or bodies moving through doors. For municipal facilities, badge readers, fences, bollards, and vestibules are physical-category examples even when networked.
Operational check: when documenting the county's control inventory, list the badge reader under physical access controls, note any linked technical systems (directory sync, door controllers) separately, and ensure physical security procedures cover badge issuance, visitor escort, and tailgating—not only firewall change tickets.